[harlan-zw]

🔗 Linked issue

Related to #481, #484

❓ Type of change

• 📖 Documentation
• 🐞 Bug fix
• 👌 Enhancement
• ✨ New feature
• 🧹 Chore
• ⚠️ Breaking change

📚 Description

A spent GitHub quota is the only run failure production has shown: 15 RATE_LIMITED Resolutions in 14 days. Launch traffic will repeat the same Skills, so a run should spend GitHub quota only when nothing it needs was read before.

• Commit and tree reads by SHA come from KV. Their answers never change. Keys name the Repository ID and the SHA, and only the public client gets the cache. A KV failure is reported and reads GitHub instead.
• A checks-only policy bump re-checks stored bytes. BYTE_COMPATIBLE_POLICY_VERSIONS lists earlier policies that packed the same bytes. A ready build under one of them is read back from R2 and checked under the current checks. It must also pass every rule a GitHub load applies today. fix(artifact-delivery): run a named Skill by its registry identity #481 changed only checks, yet its bump reloaded every Skill from GitHub. The set holds 2026-10-07.1 and 2026-08-20.1: fix(artifact-delivery): run Skills that ship media or doc keys #487 leaves large media out only of folders those policies refused. A stored build that left a file out loads from GitHub, because R2 holds only the files it packed. A check version change under the current policy takes the re-check path too.
• A second first run waits for the first build. It looks in D1 for an earlier running build of the same Repository, commit and folder. If one exists, the build goes back on the queue as a new message 2 seconds later, then reuses the finished build. A build waits for at most 90 seconds from its creation, and never waits for a build that has not changed state in 90 seconds.

GitHub requests per run, measured on the same fake Repository with the real source client. Each fresh build includes one tarball request.

Run	Before	After
First run, pinned to a commit	7	7
Repeat run, pinned	0	0
First run, on a branch	8	8
Repeat run, on a branch	3	2
First run of another Skill at a built commit	7	4
First run after a checks-only policy bump	7	0
Second of two concurrent first runs, pinned	7	0
Second of two concurrent first runs, on a branch	8	3

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.